Unscored severity · published Sep 2, 2005
CVE-2005-2771
WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) processes access and deny lists in a case-sensitive manner, when previous versions were…
–
CVSS
4.8%
EPSS
No
On KEV
Description
WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) processes access and deny lists in a case-sensitive manner, when previous versions were case-insensitive, which might allow remote attackers to bypass intended restrictions and login to accounts that should be denied.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.8% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FS
F-secure Ssh Server · F-secure
5.1; 5.2; 5.3 · source: NVD
WR
Wrq Reflection For Secure IT Windows Server · Wrq
6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2771
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2771
Patch
http://secunia.com/advisories/16649/
securitytracker.com
http://securitytracker.com/id?1014835
support.wrq.com
http://support.wrq.com/techdocs/1910.html
Third Party Advisory
http://www.kb.cert.org/vuls/id/758054
More from F-secure Ssh Server
–
CVE-2006-0705
Format string vulnerability in a logging function as used by various SFTP servers, including (1) AttachmateWRQ Reflection for Secure IT UNIX Server before 6.0.0.9, (2) Reflection…